SIP协议量子身份认证与密钥协商方案

Quantum authentication and key agreement scheme for SIP protocol

摘要:

针对现有SIP协议安全方案无法检测窃听、以及经典密码体制面临量子计算攻击时的脆弱性问题，提出了一种将量子用户身份认证及密钥协商与SIP协议结合的方案。SIP服务器制备三粒子W态并将其中两个粒子分发给SIP用户，首先对随机插入的粒子进行测量以检测窃听，然后通过量子操作与测量验证用户身份；密钥协商阶段，三方不需制备与分发新的W态，仍基于持有的W态进行随机测量，SIP用户根据有效测量结果生成初始会话密钥．性能分析表明本方案能够对抗伪装攻击与窃听攻击，有效提高SIP协议安全性。

Abstract:

To overcome the shortcomings of current SIP safety scheme, such as the incapability to detect the wiretap and the vulnerability of the classical key system in case of quantum computation attack, this paper proposed a novel user authentication and key agreement scheme that combined quantum safe communication methods and SIP protocol. The SIP server prepared the three particle W states and distributed two of them to the SIP users. The random inserted particles were measured first to detect the wiretap; then the rest of the W states were operated and measured to authenticate the user. After that, every particle of the W states was measured randomly and the two SIP users got the initial conversation key according to the results of the effective measurements. The performance analysis shows our scheme is capable of resisting the impersonation attack and wiretap attack, thus can increase the safety of SIP protocol effectually.